Protects your collaborators' and administrators' accounts from unauthorized access attempts.
Automatically blocks anyone trying to guess passwords at scale.
Applies to the password recovery flow as well, not just login.
Does not create additional friction for legitimate users who log in correctly.
This feature operates automatically and transparently — no configuration is required from the user.
Block flow:
A user (or attacker) repeatedly attempts to log in with incorrect credentials.
Once the consecutive failed attempt limit is exceeded, the system temporarily blocks access.
The login screen displays an error message indicating the attempt limit has been reached and that the user must wait before trying again.
After the block period, access is automatically restored.
Password recovery flow:
If multiple recovery requests are made from the same IP or for the same email address, the same blocking mechanism applies.
The recovery screen displays a message indicating that the user must wait a few minutes before requesting again.
The block is temporary. No support contact is needed — access is automatically restored once the wait period expires.
A successful login before reaching the limit resets the failed attempt counter.
What happens if I get my password wrong several times?
After a set number of consecutive failed attempts, your access will be temporarily blocked. Wait a few minutes and you'll be able to try again.
How long does the block last?
The block is temporary and lifts automatically. You don't need to contact support.
Will I be affected if I log in correctly after one or two failed attempts?
No. If you complete the login before hitting the limit, the counter resets and no block is applied.
Is the "Forgot my password" flow also protected?
Yes. If too many recovery requests are made from the same IP or for the same email, the temporary block applies there too.
What happens if I get my password wrong several times?
After 5 consecutive failed attempts, your access will be temporarily blocked for 15 minutes. Once that time passes, you'll be able to try again.
How long does the block last?
The block lasts 15 minutes and lifts automatically. You don't need to contact support.
Got feedback or want to request improvements? Let us know at roadmap.whalemate.com/roadmap
